Risk Assessment

Overvieww
CoBIT is one of the IT security and internal control standards that has been adopted by the auditing industry, including the Big Four. CoBIT (Control Objectives for Information and related Technology), issued by the IT Governance Institute and now in its third edition, is becoming the standard for good practice for control over information, IT and related risks.

CoBIT provides guidance to design and manage effective governance procedures over information technology and operations. It is built around a framework for management control and accountability metrics for 34 identified processes. Big Four auditing firms are now using these controls to address Sarbanes-Oxley 404 compliance.:

COBIT components include:

• Executive Summary
• Framework
• Control Objectives
• Audit Guidelines
• Implemenation Tool Set
• Management Guidelines
  
  

Tunitas Group has incorporated many of the CoBIT controls into its Simplified Risk Assessment for Health Care methodology. Contact us for more information.